e:\WorkingCode\SystemTrans\SystemTrans_baseline\Bin\win32\vc60_Release\SystemTransform.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SystemTransform.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SystemTransform.dll
Resource
win10v2004-20240508-en
General
-
Target
SystemTransform.dll
-
Size
711KB
-
MD5
5654920a45213caf4131b0c89cbc80d9
-
SHA1
1ff79fe33b5190568a527029591ff269f99e6031
-
SHA256
4ff106af4e32c49f975f137e13ab8b0f22c88d34c2a6b34f4ead3a75d940b1f7
-
SHA512
a0d6c4c51c3e2dcb863aeb73b6aa51fad8e9536172cbac0d7393ccba7e6eda82d75ecbfa6a49aad3bae0211e68009d3293d416b0c0080d9adabe32878edfa09d
-
SSDEEP
12288:EyIP2UNsVWZZUvn6OJk0v/4LUBU0AJVYe:ELP9ONJ/oLUBUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SystemTransform.dll
Files
-
SystemTransform.dll.dll windows:5 windows x86 arch:x86
52f9f10d236183e3ffab73a7de9c6515
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Sleep
OutputDebugStringA
IsBadReadPtr
IsBadWritePtr
CreateFileA
ReadFile
WriteFile
GetLastError
SetFilePointer
GetFileSize
CloseHandle
SetThreadPriority
WaitForSingleObject
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
SleepEx
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerA
CreateThread
MultiByteToWideChar
CompareStringW
CompareStringA
SetEndOfFile
CreateFileW
IsValidLocale
EnumSystemLocalesA
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
lstrlenA
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetCommandLineA
ExitThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
TerminateProcess
GetCurrentProcess
GetModuleHandleA
FatalAppExitA
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
ExitProcess
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeLibrary
GetProcessHeap
GetModuleFileNameW
VirtualQuery
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
GetLocaleInfoW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
SetEnvironmentVariableA
winmm
timeBeginPeriod
timeSetEvent
timeKillEvent
timeEndPeriod
timeGetDevCaps
Exports
Exports
SYSTRANS_AutoSwitch
SYSTRANS_Create
SYSTRANS_CreateEx
SYSTRANS_GetOututData
SYSTRANS_GetTransPercent
SYSTRANS_GetVersion
SYSTRANS_InputData
SYSTRANS_InputPrivateData
SYSTRANS_ManualSwitch
SYSTRANS_OpenStreamAdvanced
SYSTRANS_RegisterDetailDataCallBack
SYSTRANS_RegisterOutputDataCallBack
SYSTRANS_RegisterOutputDataCallBackEx
SYSTRANS_RegisterStreamInforCB
SYSTRANS_Release
SYSTRANS_SetEncryptKey
SYSTRANS_SetGlobalTime
SYSTRANS_SkipErrorData
SYSTRANS_Start
SYSTRANS_Stop
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ